Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CCBA1C6C30F11ED988A3FFAF1222468.roa
File: 3CCBA1C6C30F11ED988A3FFAF1222468.roa (raw, json)
Hash identifier: ouw/LSWuQGh5c9aQyRaSvS6SR3PnoYm13B+lIonKWCk=
Subject key identifier: B9:53:13:38:D5:D8:40:28:7C:0F:8F:05:D3:6B:1E:42:4F:FC:4A:04
Certificate issuer: /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial: 09F9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access: rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CCBA1C6C30F11ED988A3FFAF1222468.roa
Signing time: Wed 15 Mar 2023 08:56:13 +0000
ROA not before: Wed 15 Mar 2023 08:56:08 +0000
ROA not after: Fri 15 Mar 2024 08:56:08 +0000
asID: 61290
IP address blocks: 161.123.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2553 (0x9f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Validity
Not Before: Mar 15 08:56:08 2023 GMT
Not After : Mar 15 08:56:08 2024 GMT
Subject: CN=6411882d-ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:8a:3b:80:46:0d:2b:4b:62:f8:14:bb:04:
ce:68:94:95:69:67:53:3b:b6:28:f8:22:2b:4c:d3:
f0:3e:00:68:29:d2:b6:68:cc:f1:5e:86:04:c3:0d:
c3:4b:00:5f:05:7f:c6:0a:8e:49:2f:e1:38:f3:ec:
70:10:d7:1d:81:43:fe:f8:fd:b4:46:32:7c:fc:55:
a9:6c:6f:1c:70:f9:50:dc:76:6e:30:c3:00:5f:9b:
7b:92:1c:e1:97:04:46:89:ed:7b:03:6d:c0:db:78:
14:45:d6:b4:b5:ae:e7:d0:b3:51:98:35:bc:02:bf:
96:f1:dd:9a:4b:f2:bc:29:c2:a1:e7:88:8f:be:6e:
49:c1:49:b0:62:be:3d:fd:aa:d1:14:05:ba:bf:98:
09:fe:23:27:14:3f:dd:70:a7:39:61:0b:4c:72:a7:
66:2f:4b:e1:5d:77:f6:c9:74:4a:e8:8c:4d:31:ca:
21:25:02:06:8e:a4:14:f4:77:07:35:5e:46:2f:38:
56:3e:99:43:07:2a:87:7e:52:ae:ae:33:c3:a7:b6:
16:5a:88:9c:51:9d:24:4c:c8:8c:96:79:ff:4a:80:
8f:f3:e4:62:64:0c:d3:b2:0c:bb:e3:55:38:e3:99:
5b:5a:ff:c7:b2:d1:54:33:59:39:3c:a7:27:bf:e3:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:53:13:38:D5:D8:40:28:7C:0F:8F:05:D3:6B:1E:42:4F:FC:4A:04
X509v3 Authority Key Identifier:
keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3CCBA1C6C30F11ED988A3FFAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.123.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9f:af:c2:80:ce:0f:5f:ed:73:a5:c2:8e:f6:f3:d1:ee:0f:
49:8d:11:da:53:4c:4a:c5:66:85:00:3a:de:f4:01:0a:a4:9f:
43:d5:d3:71:52:1e:55:d7:92:ff:81:d8:64:e7:fa:8c:df:96:
32:50:72:52:d9:24:bb:6a:10:dc:cb:4c:bb:7f:8e:88:c9:ee:
4f:46:40:fc:84:2e:37:9c:e2:01:59:e6:bd:73:c1:eb:10:0c:
ee:f6:ac:6f:1f:6a:4e:80:9f:41:7a:19:7c:a8:80:f2:ff:76:
76:fd:d6:86:b2:53:ac:a2:a6:38:66:f2:b8:5f:24:14:9a:35:
46:8b:10:5d:1a:4e:66:50:6a:f8:2f:3f:0e:d1:b3:83:70:5d:
21:a0:1a:f3:86:f0:af:08:77:42:54:d4:15:be:e3:b4:74:65:
7e:69:8e:e3:38:18:cb:11:18:98:96:97:c3:32:7d:a8:96:be:
58:13:ef:68:b9:b7:9b:91:e8:27:90:42:d2:6b:0d:7e:4a:3f:
83:16:55:69:85:0c:8e:24:a0:bc:21:d5:6e:71:ac:51:4a:db:
e8:e5:c8:7e:a1:52:c1:7d:e3:a6:b1:fa:b5:b4:77:1a:b3:e6:
f1:77:2e:ae:76:4c:19:98:18:73:3b:68:82:52:e1:8f:81:f9:
8a:85:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:32 2023 by rpki-client on console-ams.rpki-client.org